The most useful GPOs in Windows Server 2012R2

What are in your opinion the most useful GPOs in Server 2012 R2 that improving the work of the administrator and raising level of network security.
Cloud you share your opinion. please?
This topic first appeared in the Spiceworks Community

Good Morning All,I'm currently trying to run a script to convert all xls files to xlsxI am using a script written here:
https://gist.github.com/gabceb/954418The script as is:PowershellAdd-Type -AssemblyName Microsoft.Office.Interop.Excel$xlFixedFormat = [Microsoft.Office.Interop.Excel.XlFileFormat]::xlOpenXMLWorkbookwrite-host $xlFixedFormat$excel = New-Object -ComObject excel.application$excel.visible = $false$folderpath = "C:\temp\test\test_1"$filetype ="*xls"Get-ChildItem -Path $folderpath -Include $filetype -recurse | ForEach-Object `{ $path = ($_.fullname).substring(0, ($_.FullName).lastindexOf(".")) "Converting $path" $workbook = $excel.workbooks.open($_.fullname) $path += ".xlsx" $workbook.saveas($path, $xlFixedFormat) $workbook.close() ## Create old folder and move original files here $oldFolder = $path.substring(0, $path....

Similar Messages

  • Unable to Deploy Software using GPO in Windows Server 2012

    Dear Microsoft Team,
    When I tried to deploy a software using GPO its giving an error -Add operation failed. Unable to extract deployment information from the package. Run validation on the package to ensure that the package is correct

    Hi Subin,
    I agree with Prabhu that the software package you deploy via group policy needs to in the format of .msi. The company or developer who produces the application provides the Windows Installer package .msi file and includes it with the application.
    If a Windows Installer package does not come with an application, you might need to create a Windows Installer package by using a third-party tool.
    Best regards,
    Frank Shen 

  • What is the most powerful books for Windows server 2008 and R2?

    Hi,
    There are many books out there that cover Windows server 2k8 and its R2 successor but i wonder which ones to focus on. In the same time, all books are for one purpose, "Windows Server 2008". Each author has his/her own view on the platform. I don't
    want to read them all just to avoid confusions and complications.
    These are the list of books that i have along with books that i finished reading them:
    Exam 70-640 Configuring Windows Server® 2008 Active Directory® (Finished this)
    Exam 70-642 Configuring Windows Server 2008 Network Infrastructure (Finished this)
    Exam 70-643 Configuring Windows Server 2008 Application Infrastructure
    (Finished this)
    Exam 70-646 Windows_Server__2008_Server_Administrator_Second_Edition (Finished this)
    Mastering_Windows_Server_2008_R2 (Finished this)
    McGraw.Hill.Microsoft.Windows.Server.2008.Administration.Feb.2008
    McGraw.Hill.Microsoft.Windows.Server.2008.The.Complete.Reference.Feb.2008
    OReilly.Windows.Server.2008.The.Definitive.Guide.Mar.2008
    Sams.Teach.Yourself.Windows.Server.2008.in.24.Hours.May.2008
    Sybex.MCTS.Windows.Server.2008.Active.Directory.Configuration.Study.Guide
    Windows Server 2008 Active Directory Resource Kit (Finished this)
    Windows Server 2008 Networking and Network Access Protection (Finished this)
    Windows Server 2008 Unleashed
    Windows Server 2008 R2 Unleashed
    Do you think the unfinished books worth reading?
    Appreciate your help.

    Thank you for the reply. My goal is to read everything (ins and outs) about Win 2008 and R2 platforms before i jump into Win 2012. I have pretty good experience in certain roles in Win 2008 such ADDS and ADCS. As clarified, i've finished a good number of
    books but i want to make sure that i didn't miss a single piece of information that maybe covered in another book.
    Honestly, i find the Technet docs are informative but daunting. On the other hand, books written by authors are more friendly because authors can throw jokes while explaining a certain technology, which makes the reader more attracted to the topic. In addition,
    examples, practices, labbing, and quizzes in the books are more fun.

  • Keep getting a pop up at the top of many websites I visit 'firefox security error content at *web address* may not load" I am using the most recent firefox and windows 7.

    Keep getting a pop up at the top of many websites I visit 'firefox security error content at *web address* may not load" I am using the most recent firefox and windows 7. This is happening at many sites, such as hotmail, google reader, and many others.

    Sorry, I don't think that is a message from inside Firefox, the wording doesn't sound correct - at least the beginning of that message. My "gut" thinks that is a MSN Live message to explain and compensate for their lack of security with a re-direct from a secure domain to an un-secure domain. ''(the end of that message)''
    {Ctrl + Shft + J} will open the Firefox Error Console - I'm curious what Firefox has to say about that situation. If you find the error message for that domain, you can right-click the message to '''copy''' it and then paste that error message here.
    Maybe '''TonyE''' or '''cor-el''' will be more familiar with the situation at Live and maybe at Google Reader, I don't use either of those services and have never seen a message like that myself.

  • Error While installing Visual Studio 2005 in windows server 2012R2

    Hi Team
    One Help
    I am using windows server 2012R2.I want to install visual studio 2005.
    i downloaded VS 2005 from :
    http://www.microsoft.com/en-us/download/details.aspx?id=804
    while installin i am getting this error : 
    "the upgrade patch cannot be installed by the windows installer service because the program to be upgraded or missing or upgrade patch may update a different version of the program.Verify that progam to be upgraded on exiting computer that you have
    the correct upgrade patch"
    PLease help us.
    Thanks,
    Bob

    Hi Gopi,
    Are you trying to add the hosts to your OEM 12c, and then choosing "Deploy Agent"?
    Please check this error message about the image file..
    The image file C:\oracle\core\12.1.0.2.0\jdk\bin\java.exe is valid, but is for a
    machine type other than the current machine.
    "Validating OMS_HOST & EM_UPLOAD_PORT failed."
    If the agents are deployed earlier from another OEM12c server, please undeploy them and then try.
    Thanks,
    Rajiv.

  • Windows Server 2012R2 Failover Cluster error with mounted volumes

    Hi all,
    I've a problem with mounted volume on a WSFC build on top of Windows Server 2012R2, the situation is:
    M: is the volume hosting mounting points
    disk-1, disk-2, disk-3 are volume mounted on M:\SomeFolder
    Theese volumes are used by a SQL Server Failover Cluster Instance, but my problem is related to WSFC. I've set dependencies so disk-1, disk-2, disk-3 depend upon H:
    If I try a failover of the role "SQL Server" I observe that when the disk come online in the other node they fail with this error:
    Cluster resource 'disk-1' of type 'Physical Disk' in clustered role 'SQL Server (ISQL2014A)' failed. The error code was '0xaa' ('The requested resource is in use.').
    Based on the failure policies for the resource and role, the cluster service may try to bring the resource online on this node or move the group to another node of the cluster and then restart it.  Check the resource and group state using Failover Cluster
    Manager or the Get-ClusterResource Windows PowerShell cmdlet.
    If I manually take offline H: and than bring it online and then manually take online all disk (1 to 3) they come online with no error.
    I'm going crazy!

    I've found the root of the problem: the servers are virtual machine on a VMware ESX 5.5 infrastructure, VMware claims that on 5.5 multipath is supported for raw device mapping disks but disabling multipath (I've set to fixed path) the Windows Server Failover
    Cluster stops to get problems.
    Now we have opened a support call with VMware.

  • Visual Studio 2013 on Window Server 2012R2

    Help install of visual studio 2013 in Window Server 2012R2 - please help  -  I do believe there are regedit additions that has
    to be made.

    Hi alberc,
    Please share at least your error info here so that we can troubleshoot it.
    Or you can upload your logs. Please use  http://aka.ms/vscollect 
    to gather the installation logs. After using it, you will find vslogs.cab from %temp% folder. Please upload the file to
    https://skydrive.live.com/ 
    and share the link here.
    And a common troubleshooting steps have been listed here:
    https://support.microsoft.com/en-us/kb/2899270?wa=wsignin1.0
    Best regards,
    Barry
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Windows Server 2012R2 disks go offline after reboot

    Hi all,
    I've a strange issue in my brand new Windows Server 2012R2, let's describe the environment:
    Hypervisor = VMware ESX 5.5
    Guest OS = Windows 2012 R2 Standard Edition
    I've configured the guest OS with several disk for a SQL Server installation, each disk are presented as "pure" virtual disk to Windows that means no RDM (pass through disk).
    After a reboot I've discovered that SQL Server has failed to come online, on a brief analisys, all the disks except system drive (C:) and a volume dedicated to swap file (D:) have not come online. They are present in disk management, but they are offline.
    I've manually brung online those disk, than reboot and all returned to normality. Subsequent reboot have generated no issues.
    In the system log I have no error message except that one of SQL that fails to came online due to the lack of disks...

    This happened to me too. Except with server 2008 R2 and exchange 2010. My servers replicate offsite using zerto and I was testing failover and noticed the drive D was offline. Brought it online then rebooted and everything was fine.
    So I just build a server 2012 R2 Datacenter edition VM on my production servers, gave it a second disk, initialized it, formatted it and assigned it the drive letter D. Rebooted after installing 3 windows updates and it was offline. There is nothing on this
    server at all. It's a fresh install.
    I'm running ESXi 5.5 build 2302651 with hardware version 8 and VMware tools version 9.4.11 build 2400950.
    From my experience when you see this kind of stuff happen in multiple situations it will happen again. My worry is what if one of my hosts decides to die and HA kicks in and the disk is offline when it boots.
    Anyone have anything to add to this?
    Edit: My DR site where I tested my failover is DAS and my production site is iscsi. So I don't think the storage type matters.
    Edit 2: The SCSI controller type is Paravirtual for all my VM's.

  • Windows Server 2012R2 kerberos authetication failure with IBM iSeries

    Hi all,
    I've an IBM iSeries in my environment configured to use kerberos authentication, this type of SSO works fine from 2 years. Every client Windows 7 or Windows 8 works fine.
    Now I'm planning to deploy Windows 8.1 and Windows Server 2012R2.
    I've made a lot of attempts:
    Windows 2012 -> works
    Windows 8 -> works
    Windows 2012R2 -> does not works
    Windows 8.1 -> does not works
    All the server and workstation involved in thees attempts belong to the same OU and the same user are utilized.
    It seems clear to me that Windows 8.1 / 2012R2 has a different behaviour with kerberos authentication but I don't found anything on the technet.
    Please note that all DC are Windows server 2008R2 by two years.

    Hi, any news for your problem ?
    This setup should work ok.. Any firewall running on the 2012R2 or 8.1 ? did you checked the security log on the DC to see why the ticket was refused ? etc..
    Regards, Philippe
    Don't forget to mark as answer or vote as helpful to help identify good information. ( linkedin endorsement never hurt too :o) )
    Answer an interesting question ? Create a
    wiki article about it!

  • Windows Server 2012R2 RDS sound and smartcard redirection issues

    We are using RDS collection with two Windows Server 2012R2 session hosts. Both hosts are virtual servers (clean installation) and are used as session hosts (terminals) with 10 to 25 users each.  RDS Connection Broker is also virtual machine with
    Windows Server 2012 R2. Our users are using Windows 7 Embedded thin clients with MSTSC RDP 8.0.
    Our terminals are running correctly after fresh boot, but in 12 to 48 hours after boot we encounter problem with sound and smardcards redirection in RDP. Remote sound stops working and users cannot login with their smardcards.
    Relogging users doesnt help, deleting profiles doesnt help, restarting sound service doesnt help, only viable way to solve issue is server restart. There is not any event in event log about this issue.

    Hi,
    Thank you for posting in Windows Server Forum.
    Sound Redirection:
    Please check the following GP setting as well.
    Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection
    Limit audio playback quality: Enabled
    Audio Quality: High
    On the Client PC, in the .rdp file that you use to connect to the server, make sure you have the following line:
    audioqualitymode:i:2
    In addition check that the Windows Audio and Windows Audio Endpoint Builder services must be running for audio to work.
    Smartcard redirection:
    Kindly try to update the patch for Smartcard redirection and check the result.
    Smart card redirection in remote sessions fails in a Windows 7 SP1-based RDP 8.1 client
    http://support.microsoft.com/kb/2913751
    Hope it helps!
    Thanks,
    Dharmesh

  • Windows Server 2012R2 DHCP Load Sharing Mode

    Hello,
    I am planning to migrate a standalone DHCP Server on Windows 2003 to Windows Server 2012R2. With this migration, I like to use the 2012R2 Load Sharing Mode feature for DHCP. This implementation cover TWO sites.
    My initial plan was to have two Windows 2012R2 DHCP Servers (virtual) at each site thus servers at each offers site redundancy  as well. So two at Site 1 and two at Site 2 on load sharing mode. If ServerA at Site 1 goes down for some reason Server B
    at Site1 will service the DHCP clients in load sharing mode without going to Site 2. I came across a MS document that says:
    Number of Servers: DHCP failover is not supported for more than two DHCP Servers. The failover relationship is always comprised of two DHCP servers.
    Does this mean I can have only TWO DHCP Servers in a load sharing mode. One at Site 1 and the second one at Site 2??
    Thanks in advance
    TIA TP

    Hi,
    The DHCP failover relationship is comprised of DHCP server and its partner.  In a relationship there are just 2 DHCP servers.
    But this doesn’t mean you can just use 2 DHCP servers in your sites.  The DHCP failover setting is based on DHCP scope, for one DHCP scope there could be just one DHCP failover relationship including 2 DHCP servers. If you have more than 1 DHCP scope,
    for example, set DHCP failover relationship between DHCP server 1 and DHCP server 2 for scope A. then set DHCP failover relationship between DHCP server 1 and DHCP server 3 for scope B.
    The document Step-by-Step: Configure DHCP for Failover(http://technet.microsoft.com/en-us/library/hh831385.aspx) is a introduction about this function and for your reference.
    Depends on the DHCP scope’s configuration and the requirements of your network. You may enhance or customize the architecture of implementation.
    Best Regards,           
    Eve Wang  

  • Windows Server 2012R2 fails to get update from WSUS with error code 80072ee6

    Hi all,
    I've deployed WSUS role on a Windows Server 2012R2 machine. WSUS listen on port 8530. Now I'm trying a test server (this machine runs WIndows Server 2012R2 too). I've configured a GPO but when I try to check for updates I get the errore in the subject.
    I've checked windowsupdate.log and theese are the settings of the client:
    AIR Mode is disabled
    2014-02-05 12:59:00:357
    776 fe0
    AU  # Policy Driven Provider:  http://MyWSUS.MyDomain.local:8530
    2014-02-05 12:59:00:357
    776 fe0
    AU  # Detection frequency: 22
    2014-02-05 12:59:00:357
    776 fe0
    AU  # Target group: CSM Servers
    2014-02-05 12:59:00:357
    776 fe0
    AU  # Approval type: Pre-install notify (Policy)
    2014-02-05 12:59:00:357
    776 fe0
    AU  # Auto-install minor updates: No (User preference)
    2014-02-05 12:59:00:357
    776 fe0
    AU  # Will interact with non-admins (Non-admins are elevated (User preference))
    I confirm that from the test server I can telnet to my wsus server on TCP port 8530

    Hi,
    This issue occurs if the URL under the Group Policy setting 'Specify intranet Microsoft update service location' is invalid.
    You receive a "80072EE6" error code when you download an update from Windows Server Update Services in Windows 7-based or Windows Server 2008 R2-based
    computer
    http://support.microsoft.com/kb/2724184
    Make sure that the URL is correct and the name can be resolved.
    Hope this helps.

  • Windows Server 2012R2 ISO trial not booting

    I downloaded Windows Server 2012R2 ISO trial file - named 9600.17050.WINBLUE_REFRESH.140317-1640_X64FRE_SERVER_EVAL_EN-US-IR3_SSS_X64FREE_EN-US_DV9.ISO .
    After burning by Nero 12 (and even by Windows 8 image burning tool) , I got only one README.TXT file on the DVD disk,
    with the text content:
    This disc contains a "UDF" file system and requires an operating system
    that supports the ISO-13346 "UDF" file system specification.
    I tried to begin boot from this disk to install Windows server 2012 R2  , but I got the error message:
    Couldn't find BOOTMGR
    How can I solve this problem?
    Regards,
    Zvi

    Try with WUDT
    http://www.microsoft.com/en-us/download/windows-usb-dvd-download-tool
    I personally no longer use DVD media. I use UFD instead and I recommend it to you.

  • DPM Storage Pool on Windows Server 2012R2 iSCSI target Storage Spaces - supported?

    Hi,
    for migration purpose we need more space for one of our DPM 2012R2 Servers.
    And we cannot buy more space for our NetAPPs..
    So our idea was to use an Windows Server 2012R2 as an iSCSI target and use Storage Spaces.
    I remember something that using an iSCSI target on Windows 2008 was not supported.
    Is this configuration supported when usinf DPM 2012R2 on Win 2012R2 and the target is Win2012R2 aswell?
    Thanks in advance
    regards
    /bkpfast
    My postings are provided "AS IS" with no warranties and confer no rights

    Hi,
    This talks about
    Virtual DPM servers, but the same is true for Physical DPM servers when it comes to using .VHD(x) files for DPM storage pool.
    Virtual DPM installations do not support the following:
    Windows 2012 Storage Spaces.
    Virtual hard drives built on top of storage spaces.
    Local or remote hosting of VHDX files on Windows 2012 storage spaces.
    Enabling Disk Dedupe on volumes hosting virtual hard drives.
    Using synthetic FC to connect to tape drives.
    Windows 2012 iSCSI targets (which use virtual hard drives) as a DPM storage pool.
    NTFS compression for volumes hosting VHD files used in the DPM storage pool.
    Bitlocker on volumes hosting VHD files used for the storage pool.
    A native 4K sector size of physical disks for VHDX files in the DPM storage pool.
    Virtual hard drives hosted on Windows 2008 servers.
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT]
    This posting is provided "AS IS" with no warranties, and confers no rights.

  • Lync 2013 Publish Topology Failed in window server 2012R2

    Scenario
    Lync Enterprise Edition!
    Windows Server 2012R2 - LyncServer 2013 
    WIndows Server 2008R2 - Sql 2008 R2 Failover Cluster (Multiple Database and Instances Created) 5 Others Application Database also Created which has been used.
    DNS Entries 
    HOst Name :
    LYNCFE.consoto.com
    Pool.consoto.com    (Host Name Created Same IP as Lync Frontend Server)
    dialin.consoto.com
    meet.consoto.com
    admin.consoto.com
    DBLYNC.consoto.com 
    Virtual Instant Name of Sql Database and Instance name : DBLYNC\Lynccore
    Permission Rights:
    I am using the Administrator account for Lync 2013 Installation.
    Domain Administrator Account Member to CSAdministrator group and RTC Universal Server admin group.
    SQL sysadmin Account member Sqladmin and Domain administrator User. 
    ShareFolder-Lyncshare on Storage.consoto.com
    Permission: 
    Everyone Read-write
    RTCComponentUniversalServices Read-write
    RTCHSUniversalServices Read-write
    RTCUniversalServerAdmins Read-write
    RTCUniversalConfigReplicator Read-write
    Virtual Computer Name DBLYNC$ Full control
    Issue : I have create one topology and try to publish but getting error.Log Detail Below
    Feature: CentralMgmtStore
    SQL Instance: domain-name.com\lynccore
    Collocated: False
    Found "RTCUniversalServerAdmins": True
    Found "RTCUniversalConfigReplicator": True
    Found "RTCUniversalReadOnlyAdmins": True
    TaskFailed: Task execution failed.
    Error:The network name cannot be found.
    ▼ Details
    └ Type: IOException
    └ ▼ Stack Trace
    └ at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
    at System.IO.Directory.InternalCreateDirectory(String fullPath, String path, Object dirSecurityObj, Boolean checkHost)
    at System.IO.Directory.InternalCreateDirectoryHelper(String path, Boolean checkHost)
    at Microsoft.Rtc.Common.Data.DatabaseManager.CreateDatabase(String dbFileBase, String dbPath, String logPath, Int32 dbSizeMB, 
    Int32 logSizeMB, Int32 dbGrowthMB, Int32 logGrowthMB, Int32 maxDbSizeMB, Int32 maxLogSizeMB)
    at Microsoft.Rtc.Common.Data.DatabaseManager.CleanInstallDatabase(String dbFileBase, String initialScripfilePath, String 
    dbPath, String logPath, Int32 dbSizeMB, Int32 logSizeMB, Int32 dbGrowthMB, Int32 logGrowthMB, Int32 maxDbSizeMB, Int32 
    maxLogSizeMB)
    at Microsoft.Rtc.Common.Data.DbSetupBase.CleanInstallDatabase()
    at Microsoft.Rtc.Common.Data.DbSetupBase.CreateOrUpdateDatabase()
    at Microsoft.Rtc.Common.Data.XdsDatabase.CreateOrUpdateDatabase()
    at Microsoft.Rtc.Management.Deployment.Tasks.DatabaseCreator.CreateDatabaseForFeature(String featureName, Boolean clean, 
    Boolean update, String sqlServer, String instanceName, Boolean collocated, Boolean backup, Boolean noreindex, 
    DatabasePathAssignment[] pathAssignments, Boolean broadCast, String& logfile)
    at Microsoft.Rtc.Management.Deployment.installdatabaseCmdlet.CreateDatabaseForFeature(Planitem i)
    at Microsoft.Rtc.Management.Internal.Utilities.LogWriter.InvokeAndLog[T](Action`1 action,T arg)
    TaskFailed: An error occurred while creating or updating the database for feature CentralMgmtStore. For details, see the log 
    file ‘C:\Users\Administrator\AppData\Local\Temp\2\Create-CentralMgmtStore-domain-name.com_lynccore-[2014_07_09]
    [11_40_46].log’
    TaskFailedResolution: Consult exception information and previous errors for more information on how to resolve this error.
    Error: An error occurred: "System.IO.FileNotFoundException" "The network name cannot be found"
              

    SQL Scenario
    Windows Server 2008R2 - Sql 2008 R2 Failover Cluster (Multiple Database and Instances Created) 5 Others Application Database
    also Created on  the Failover Cluster.
    Failover SQL Cluster
    Active                 
      Passive
    Computer Name: Cluster1.Consoto.com                        
    Computer Name : Cluster2.Consoto.com
    ping cluster1.consoto.com reply IP 192.168.0.30 from Lync FE     
    ping cluster2.consoto.com reply  IP 192.168.0.31 from Lync FE
    SQL Database DBLYNC IP is 192.168.0.40 and also reply from Lync Server

Maybe you are looking for

  • Move sales order stock to company stock in QI

    Is there any movement type to move sales order stock to company's own stock in quality. With 411 E quantity is transferred from unrestricted-use special stock E (sales order stock) to unrestricted-use company’s own stock. But my company requires that

  • How to search a network/external hard drive in finder?

    I use my Macbook at work where I am required to save all files I work on to a network hard drive on our server. I also have to be able to find and access files from the network drive for customers. In Snow Leapord I had the ability to type in the sea

  • SAPNW::Rfc trapping VERSION

    I'm trying to send the VERSION flag to BAPI_XMI_LOGON as follows: SAPNW::Rfc->load_config; my $rfc = SAPNW::Rfc->rfc_connect; my $it = $rfc->function_lookup("BAPI_XMI_LOGON"); my $rc = $it->create_function_call; $rc->EXTCOMPANY('TWDC'); $rc->EXTPRODU

  • PNPBEGDA and PNPENDDA

    Hello, I am using the PNP logical database along with HR Report category set to HRDEOD01. The selection screen works fine for 'Payroll Period' tab. However, if I were to choose date range from 'period' like - Today / Current Month / Current year, etc

  • How to customize the search screen of InputListoFValues

    I have a requirement where i have InputListofvalues, i click on serach icon and see the popup with serach panel and table. I want to customize that search panel,i need to have simple serach dont want those advance feature like Match all , advance sea